Extracted

• • Target
    PO 19877.exe
  • Size 674KB
  • SHA256 30bbf2043054b92e495bbd55f67e43b8eafce430bf31d8aaa4899385e503cdbe
  • MD5 56c623aaef953d0c9e12d8dc1db68bf4
  • SHA1 4bea4c46b11e0e096d0d9cf34cdab5b11b001d90
  • SHA512 0d9241c022bf006dfa029d1f9807ab62bd904a253cd9891c8e706fb1ec570c962fe197e1d02dfc4b30e53799850e0fb4e986857291ebf0cad3342c476900c15a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2